NOTICE: This package has been removed from pkgsrc

./www/ruby-actionpack, Two-step approach to web response generation

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ]

Branch: CURRENT, Version: 2.3.14, Package name: ruby19-actionpack-2.3.14, Maintainer: minskim

Action Pack splits the response to a web request into a controller
part (performing the logic) and a view part (rendering a template).
This two-step approach is known as an action, which will normally
create, read, update, or delete (CRUD for short) some sort of model
part (often backed by a database) before choosing either to render a
template or redirecting to another action.

Action Pack implements these actions as public methods on Action
Controllers and uses Action Views to implement the template rendering.
Action Controllers are then responsible for handling all the actions
relating to a certain part of an application. This grouping usually
consists of actions for lists and for CRUDs revolving around a single
(or a few) model objects. So ContactController would be responsible
for listing contacts, creating, deleting, and updating contacts. A
WeblogController could be responsible for both posts and comments.

Action View templates are written using embedded Ruby in tags mingled
in with the HTML. To avoid cluttering the templates with code, a
bunch of helper classes provide common behavior for forms, dates, and
strings. And it's easy to add specific helpers to keep the separation
as the application evolves.


Required to run:
[devel/ruby-activesupport] [lang/ruby19-base] [www/ruby-rack11]

Master sites:

SHA1: d3140bce6e6051e3a5d0b95b1f221bda77122768
RMD160: fba269031390c0b502b2905adf76c39ca0a76328
Filesize: 731.5 KB

Version history: (Expand)

CVS history: (Expand)


   2012-03-18 09:08:17 by Takahiro Kambe | Files touched by this commit (5) | Package removed
Log message:
Remove ruby-actionpack, say good-by to Ruby on Rails 2.
   2011-12-13 16:57:27 by Takahiro Kambe | Files touched by this commit (1) 
Log message:
* Switch to use RUBY_RAILS_SUPPORTED.
* Don't hard code RUBY_RAILS2_VERSION in DISTNAME.
   2011-08-17 16:13:32 by Takahiro Kambe | Files touched by this commit (1) 
Log message:
Update ruby-actionpack package to 2.3.14:

2.3.14:

Security Fix:

1. The code in Ruby on Rails 2.3 which sets the response content type
   performs insufficient sanitization of the values provided.  This
   means that applications which let the user provide an arbitrary
   Content-Type header for the response are vulnerable to response
   splitting attacks.

2. The strip_tags helper in Ruby on Rails is designed to remove all
   HTML tags from a string.  By using specially crafted values an
   attacker can confuse the parser and cause HTML tags to be injected
   into the response.  This can be exploited to inject arbitrary
   javascript into the rendered page.

   Future releases of Ruby on Rails are likely to replace the current
   HTML tokenizer with one provided by libxml to reduce the likelihood
   of errors such as these in the future.  In the meantime users can
   install the loofah gem[1] which should enhance both the performance
   and reliability of the HTML sanitization helpers.
   2011-06-11 05:13:46 by Takahiro Kambe | Files touched by this commit (8) 
Log message:
Update Ruby on Rails supporting packages to 2.3.12.

Exact changes are unknown but some bug fixes.
   2011-03-23 15:27:15 by Takahiro Kambe | Files touched by this commit (5) 
Log message:
Switch to utilize lang/ruby/rail.mk.
   2011-02-09 13:40:52 by Takahiro Kambe | Files touched by this commit (3) 
Log message:
Update ruby-actionpack package to 2.3.11.

* More strict dependency reflect gemspec's description.

*2.3.11 (February 9, 2011)*

* Two security fixes. CVE-2011-0446, CVE-2011-0447
   2010-10-15 13:37:05 by Takahiro Kambe | Files touched by this commit (3) 
Log message:
Update www/ruby-actionpack package to 2.3.10.

No change except version, it is part of Rails 2.3.10.
Change depending pattern to prevent ruby-activesupport 3.0.0 and later.
   2010-10-14 13:41:26 by OBATA Akio | Files touched by this commit (1) 
Log message:
ruby-actionpack-2.3.9 require rack-1.1.0, not compatible with rack-1.2.1
from www/ruby-rack, change dependency pattern.

Bump PKGREVISION.